$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531313835.roa File: 34332e3232362e37322e302f32322d3332203d3e20313531313835.roa (raw, json) Hash identifier: kSS/336cZAWVPyiDW/MySY62mT7Cy5L/TBiFinsaMuc= Subject key identifier: 0D:FB:E3:D7:8A:5B:8A:38:52:E6:C7:23:49:22:24:49:83:43:BF:EE Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 7FA96086ECF0BA945806D427472944CA1ED0DFF5 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531313835.roa Signing time: Wed 06 May 2026 02:17:18 +0000 ROA not before: Wed 06 May 2026 02:12:18 +0000 ROA not after: Wed 05 May 2027 02:17:18 +0000 asID: 151185 IP address blocks: 43.226.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:a9:60:86:ec:f0:ba:94:58:06:d4:27:47:29:44:ca:1e:d0:df:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: May 6 02:12:18 2026 GMT Not After : May 5 02:17:18 2027 GMT Subject: CN=0DFBE3D78A5B8A3852E6C723492224498343BFEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:43:2d:87:27:6b:db:f8:88:f7:9b:d9:f8:57: ec:fa:ae:b8:d0:f2:72:33:cc:83:53:40:9f:fc:b7: f6:d6:45:5a:99:04:41:77:d4:73:34:e0:c5:92:d9: 17:5a:a9:77:3c:28:9d:d1:e9:81:74:d7:f2:bc:91: ed:a5:a0:f5:73:41:3d:14:0f:8b:62:b6:31:68:e2: eb:93:53:a4:20:51:ca:62:30:8c:10:fb:b2:ce:c1: 01:9c:56:6d:f7:4a:d7:b7:9e:d6:66:e0:99:49:c6: 9d:9a:cc:b8:e1:4c:66:8e:96:f5:85:95:8d:48:d8: 66:d3:82:86:0c:2f:36:2b:7d:49:6e:ef:0d:71:e5: 4c:eb:fa:07:5f:de:94:68:1c:1d:3a:02:fd:45:b3: 55:82:0a:7b:87:3d:50:81:91:70:e3:69:ca:7f:33: 9a:04:e0:c6:80:fe:78:d9:7a:46:10:12:02:3d:57: 4d:a2:28:3b:a6:4b:33:3a:fa:f2:ab:65:06:f4:fe: de:10:ba:a5:fe:c1:08:6a:ce:77:51:66:4e:04:08: 33:d0:17:a4:63:3d:47:8a:a1:d6:a7:5c:63:d7:ee: d7:61:a2:cb:24:8c:e0:91:ba:ea:95:2d:e6:8d:be: ca:43:18:67:14:66:5f:4f:e6:54:22:43:42:c0:f5: 22:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:FB:E3:D7:8A:5B:8A:38:52:E6:C7:23:49:22:24:49:83:43:BF:EE X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption 4a:ea:76:6f:1b:4f:57:74:51:21:f1:c2:81:a2:6a:70:e6:6c: 47:9f:de:04:6f:b3:46:91:2b:8e:84:dd:ac:74:ad:21:8d:f8: 66:48:e6:e8:80:c4:28:2d:69:f3:a1:3e:2e:50:bd:8a:61:37: 1d:73:4d:66:a4:fd:a1:d0:f4:cb:c5:21:b7:78:8d:f8:bf:00: 84:94:ae:f6:85:91:5b:27:3d:6d:38:1d:e9:88:07:34:88:f0: 24:bb:32:bb:82:9d:ba:ac:4c:0a:40:99:e7:cc:93:56:25:a1: 4e:71:cf:34:91:8e:10:75:b4:32:db:10:87:37:fe:22:0a:82: 86:ef:fc:b0:f7:e0:ff:32:b8:fb:06:d2:3c:e1:46:ae:7f:c6: 6e:be:05:16:c2:10:c3:81:8f:90:54:b3:7a:91:9e:ec:65:71: cf:46:ca:40:ff:47:6b:1b:47:2c:54:3a:fb:3e:ac:07:f3:18: 07:32:65:21:21:06:74:e8:38:f5:33:54:85:5b:3a:f2:c2:57: e7:db:ca:b5:21:c0:85:2d:66:cf:79:a1:6a:8b:6e:18:59:9e: 00:9f:5e:c0:40:4c:a3:d0:56:12:aa:9b:48:37:44:67:58:8e: c9:e0:fe:9e:d7:78:cb:ac:ef:d2:01:c6:9c:d6:f5:4c:eb:1e: 48:ef:49:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUf6lghuzwupRYBtQnRylEyh7Q3/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA1MDYwMjEyMThaFw0yNzA1MDUwMjE3MThaMDMxMTAvBgNV BAMTKDBERkJFM0Q3OEE1QjhBMzg1MkU2QzcyMzQ5MjIyNDQ5ODM0M0JGRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQy2HJ2vb+Ij3m9n4V+z6rrjQ 8nIzzINTQJ/8t/bWRVqZBEF31HM04MWS2RdaqXc8KJ3R6YF01/K8ke2loPVzQT0U D4titjFo4uuTU6QgUcpiMIwQ+7LOwQGcVm33Ste3ntZm4JlJxp2azLjhTGaOlvWF lY1I2GbTgoYMLzYrfUlu7w1x5Uzr+gdf3pRoHB06Av1Fs1WCCnuHPVCBkXDjacp/ M5oE4MaA/njZekYQEgI9V02iKDumSzM6+vKrZQb0/t4QuqX+wQhqzndRZk4ECDPQ F6RjPUeKodanXGPX7tdhosskjOCRuuqVLeaNvspDGGcUZl9P5lQiQ0LA9SJRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUDfvj14pbijhS5scjSSIkSYNDv+4wHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMxMzgzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiviSDANBgkqhkiG9w0BAQsFAAOCAQEASup2bxtPV3RRIfHCgaJqcOZs R5/eBG+zRpErjoTdrHStIY34Zkjm6IDEKC1p86E+LlC9imE3HXNNZqT9odD0y8Uh t3iN+L8AhJSu9oWRWyc9bTgd6YgHNIjwJLsyu4KduqxMCkCZ58yTViWhTnHPNJGO EHW0MtsQhzf+IgqChu/8sPfg/zK4+wbSPOFGrn/Gbr4FFsIQw4GPkFSzepGe7GVx z0bKQP9HaxtHLFQ6+z6sB/MYBzJlISEGdOg49TNUhVs68sJX59vKtSHAhS1mz3mh aotuGFmeAJ9ewEBMo9BWEqqbSDdEZ1iOyeD+ntd4y6zv0gHGnNb1TOseSO9JWg== -----END CERTIFICATE-----Generated at Wed May 13 20:20:33 2026 by rpki-client